Staff Security Engineer, Fullscript
Digital health platform
Open for applications
Digital health platform
501-1000 employees
Open for applications
501-1000 employees
Company mission
Fullscript's mission is to help people get better.
Role
Who you are
- Deep technical expertise in application security, and secure software development
- Experience with AI/ML security
- Strong understanding of modern software architectures, cloud environments, and APIs
- Proven ability to influence and mentor engineers across teams, fostering security-first thinking and best practices
- Hands-on experience with security tooling and automation, including static/dynamic analysis, monitoring, and observability systems
- Strong problem solving skills, able to balance security rigor with product velocity
- Excellent communication and collaboration skills, able to translate complex security concepts to technical and non-technical stakeholders
Desirable
- Experience with protecting / hardening of health data
- Experience securing Ruby on Rails, Javascript, GraphQL applications
- Familiarity with regulatory and compliance frameworks relevant to software and AI security is a plus (e.g. SOC 2, NIST)
What the job involves
- Fullscript is seeking a seasoned Staff Security Engineer to join our security team as a senior technical leader
- In this role, you’ll shape the technical vision for product and AI security across the organization, mentoring teammates and driving impact through deep technical expertise and cross-functional collaboration
- Lead the design and implementation of robust security architectures for Fullscript’s applications, and AI initiatives
- Collaborate closely with engineering teams to embed security into the development lifecycle, including threat modeling, security coding practices, and design reviews
- Drive AI security best practices, ensuring responsible deployment, and mitigation of risks such as data poisoning, prompt injection, or model exploitation
- Mentor engineers and other security team members, fostering a culture of security awareness and technical excellence across the organization
- Conduct technical risk assessments, security research, and code reviews to proactively identify and remediate vulnerabilities
- Influence cross-functional teams through technical leadership, helping define security standards and strategies that scale across Fullscript’s products and AI ecosystem
- Stay ahead of emerging threats, attack vectors, and AI-specific security challenges to guide strategic decisions for the organization’s security posture
Our take
Canadian-based Fullscript is a digital health platform that helps over 70,000 practitioners build positive patient relationships to deliver better patient care.
The platform enables users to prescribe and manage the use of the best healthcare supplements and offers access to over 20,000 practitioner-grade products from hundreds of brands. This enables practitioners to design fully personalised plans for their patients.
The company has raised impressive funding since its conception, which has been invested into expanding its business across North America and developing more tools to serve its customers, aided through partnerships with further brands.
Steph
Company Specialist at Welcome to the Jungle
Insights
2% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Nov 2021
$240m
LATE VC
May 2019
$25m
SERIES B
Total funding: $273.1m
Company benefits
- Reach your wellness goals with our benefits plan, discount on practitioner-grade supplements, and company-wide health and wellness programs
- Our dedicated DEIB Council ensures we advocate for equality and encourage positive change within ourselves and the community. We value the unique qualities and perspectives of our team
- You choose your own office with our Wherever You Work Well approach. Whether that’s in-person or at home, teams aren’t defined by geography. Output, not location, is our success metric so we also offer a flexible approach to your working hours, vacation, and personal days
- We empower each other to grow with lunch and learns, lean in circles, show-and-tells, and more. Everyone has something to learn and something to teach so we pride ourselves on growing as a team
- We're not just a company — we're a community. Team lunches, weekly town halls, birthdays, parties, and clubs are an essential part of our community and culture
- The health of our people relies on the health of our planet. We are certified carbon-neutral, taking our first big step in creating a more sustainable future
Company HQ
Centretown, Ottawa, ON
Leadership
Kyle Braatz
(Co-Founder & CEO)Previously co-founded Simply Story Videos and founded Typically Canadian Group. Served as CRO for Scotiabank.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 10 more jobs at Fullscript